$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/NY6jPhNOsOzNwM7SHUUqVTK2EM0.roa File: NY6jPhNOsOzNwM7SHUUqVTK2EM0.roa (raw, json) Hash identifier: ZIKXqaAumttnGHwWXgEa0qXwvSzU7JwkI0zJFU6Qcr0= Subject key identifier: 35:8E:A3:3E:13:4E:B0:EC:CD:C0:CE:D2:1D:45:2A:55:32:B6:10:CD Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8 Certificate serial: 1238 Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/NY6jPhNOsOzNwM7SHUUqVTK2EM0.roa Signing time: Tue 24 Sep 2024 00:21:25 +0000 ROA not before: Tue 24 Sep 2024 00:21:25 +0000 ROA not after: Sat 20 Sep 2025 07:41:26 +0000 asID: 146834 IP address blocks: 103.139.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 00:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4664 (0x1238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8 Validity Not Before: Sep 24 00:21:25 2024 GMT Not After : Sep 20 07:41:26 2025 GMT Subject: CN=358EA33E134EB0ECCDC0CED21D452A5532B610CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:d3:f0:23:ee:04:e1:d0:ae:00:92:c2:25: d5:35:61:cd:11:85:6e:d8:bc:94:3a:4a:db:11:51: a3:53:2c:27:e6:18:bc:5e:8f:11:f2:94:24:2e:0e: 49:24:33:33:73:0d:50:b0:0f:b1:b0:c6:85:81:a9: 4d:8c:ac:d7:78:24:9f:f5:01:f9:a7:e7:82:68:96: 5a:da:a3:64:12:11:7c:6b:32:c9:da:e0:56:57:8e: 21:39:35:d9:ed:7a:2b:dd:98:cb:76:28:b7:34:3e: 73:8d:8f:82:1c:00:94:c2:19:7a:8c:41:4a:ea:59: 77:ea:b3:8b:51:45:11:73:05:ce:61:7b:de:9d:23: 35:83:f7:73:df:7a:57:3e:a3:30:29:3e:62:5d:57: 46:d8:62:2b:cc:62:69:6c:c3:d9:5b:92:9d:8b:21: 5f:27:88:6b:10:d2:e4:c4:c1:88:fe:25:16:a1:e1: dd:50:70:f6:58:9f:5d:3d:3c:13:2c:37:22:cf:ea: 1d:48:8d:91:f9:70:cf:4c:38:1a:b0:3a:7f:bf:e8: 84:19:f8:5d:f4:8a:6e:a2:98:9f:aa:a2:49:dd:5d: 7c:a4:d5:c8:31:74:40:ee:d6:66:d0:53:0a:c5:7d: b6:9c:b9:fc:6a:4f:2b:bb:28:54:7d:52:f8:59:8c: 0c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8E:A3:3E:13:4E:B0:EC:CD:C0:CE:D2:1D:45:2A:55:32:B6:10:CD X509v3 Authority Key Identifier: keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/NY6jPhNOsOzNwM7SHUUqVTK2EM0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.136.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:de:bc:44:aa:4d:63:ae:7a:0b:87:91:fb:b8:d4:49:0d:e2: 0f:6c:6e:bf:ea:3a:21:9f:f1:21:fb:d1:20:13:16:05:c0:d2: 71:1c:1e:be:63:2f:c0:04:79:7f:2c:23:b5:9a:41:54:b7:5d: 9e:b6:e2:59:90:04:c6:05:94:9d:34:5e:21:28:f7:72:40:2b: 86:c3:1a:be:73:b9:95:36:69:d9:26:21:6c:f6:b7:69:6a:b5: 22:18:f9:b2:06:c7:17:c7:ff:6e:70:1e:eb:5f:73:fc:6f:8e: 60:63:de:bc:bc:37:b6:36:a3:fe:0b:c4:3e:7e:de:a3:97:dd: 48:a4:a8:36:2e:bc:13:79:d9:6c:f4:16:48:bc:15:27:38:52: b5:0e:8e:92:6a:24:c1:ee:28:54:32:76:4e:eb:91:76:c7:9c: 97:06:4a:4a:55:d1:79:42:fd:01:4b:42:87:f8:c3:20:b0:f6: 5e:11:b5:e6:9f:44:53:46:a6:0b:b3:2d:b5:8b:54:d0:99:1f: b8:40:c4:01:1e:44:d2:26:38:7d:23:c8:fa:4f:cc:d0:0c:57: ce:45:80:24:83:56:17:50:f2:50:f9:cf:f5:1c:31:f3:f3:f2: b6:29:be:99:fb:b8:d4:c2:9a:da:85:ed:c0:fa:af:14:82:91: a2:b7:4d:c3 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODM5 RjU1N0I5RjlGMkY2Q0RENzVBRkI0QUJBOEEyQTc5NkM2MTBFODAeFw0yNDA5MjQw MDIxMjVaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKDM1OEVBMzNFMTM0RUIw RUNDREMwQ0VEMjFENDUyQTU1MzJCNjEwQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZodPwI+4E4dCuAJLCJdU1Yc0RhW7YvJQ6StsRUaNTLCfmGLxe jxHylCQuDkkkMzNzDVCwD7GwxoWBqU2MrNd4JJ/1Afmn54Jollrao2QSEXxrMsna 4FZXjiE5NdnteivdmMt2KLc0PnONj4IcAJTCGXqMQUrqWXfqs4tRRRFzBc5he96d IzWD93Pfelc+ozApPmJdV0bYYivMYmlsw9lbkp2LIV8niGsQ0uTEwYj+JRah4d1Q cPZYn109PBMsNyLP6h1IjZH5cM9MOBqwOn+/6IQZ+F30im6imJ+qokndXXyk1cgx dEDu1mbQUwrFfbacufxqTyu7KFR9UvhZjAw7AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUNY6jPhNOsOzNwM7SHUUqVTK2EM0wHwYDVR0jBBgwFoAUg59Ve5+fL2zdda+0 q6iip5bGEOgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 NC9nNTlWZTUtZkwyemRkYS0wcTZpaXA1YkdFT2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2c1OVZlNS1mTDJ6ZGRhLTBxNmlpcDViR0VPZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTQvTlk2alBoTk9zT3pO d003U0hVVXFWVEsyRU0wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWeLiDANBgkqhkiG9w0BAQsFAAOCAQEALd68RKpNY656C4eR+7jUSQ3iD2xu v+o6IZ/xIfvRIBMWBcDScRwevmMvwAR5fywjtZpBVLddnrbiWZAExgWUnTReISj3 ckArhsMavnO5lTZp2SYhbPa3aWq1Ihj5sgbHF8f/bnAe619z/G+OYGPevLw3tjaj /gvEPn7eo5fdSKSoNi68E3nZbPQWSLwVJzhStQ6Okmokwe4oVDJ2TuuRdseclwZK SlXReUL9AUtCh/jDILD2XhG15p9EU0amC7MttYtU0JkfuEDEAR5E0iY4fSPI+k/M 0AxXzkWAJINWF1DyUPnP9Rwx8/Pytim+mfu41MKa2oXtwPqvFIKRordNww== -----END CERTIFICATE-----Generated at Fri Nov 22 22:28:44 2024 by rpki-client on console-ams.rpki-client.org